SAP User Type
A – Dialog用户，即能登录SAPGUI的用户，一般员工使用的是这种类型的用户；
S – WebService用户，只能在其他系统直接调用SAP的Webservice，不能登录SAP系统；
B-本系统内部TMS、Job、ALE等用户类型，只能在SAP系统内部后台运行，不能通过GUI登录；
C-communication用户，这种用户可以在两个SAP系统间免登录直接通信（不能通过前段登录，只要配置了RFC，将这种类型的用户填写到RFC的用户位置，两个系统就能自动通信）；
L-参考用户，创建了给别人做模板用的，一般不分配给任何人和任何系统用。
User TypeDialog ‘A’
A normal dialog user is used by one person only for all types of logon.
During a dialog logon, the system checks for expired and initial passwords and provides an option to change the password.
Multiple dialog logons are checked and logged if necessary.
System ‘B’
Use the system user type for internal system processes (-> background processing) or system-related processes (-> ALE, workflow, TMS, CUA).
Dialog logon (using SAP GUI) is not possible.
A user of this type is excluded from the general settings for password validity. Only user administrators can change the password using transaction SU01 (Goto -> Change Password).
Multiple logons are permissible.
Communication ‘C’
Use users of type Communication for dialog-free communication between systems (-> RFC or CPIC) .
Dialog logon (using SAP GUI) is not possible.
The general settings for the validity period of a password apply to users of this type. Users of this type can change their passwords (like dialog users). The dialogs for changing the password must be provided by the caller (RFC/CPIC client). You can use the RFC function module USR_USER_CHANGE_PASSWORD_RFC or the RFC API function RfcOpenEx() to change the password.
Service ‘S’
A user of the type Service is a dialog user that is available to an anonymous, larger group of users. Generally, this type of user should only be assigned very restricted authorizations.
For example, service users are used for anonymous system access using an ITS service or a public Web service. Once an individual has been authenticated, a session that started anonymously using a service user can be continued as a personal session using a dialog user (see SUSR_INTERNET_USERSWITCH)
During logon, the system does not check for expired and initial passwords. Only the user administrator can change the password.
Multiple logon is allowed.
Reference ‘L’
Like the service user, a reference user is a general user, not assigned to a particular person. You cannot log on using a reference user. The reference user is only used to assign additional authorization. Reference users are implemented to equip Internet users with identical authorizations.
On the Roles tab, you can specify a reference user for additional rights for dialog users. Generally, the application controls the allocation of reference users. You can allocate the name of the reference user using variables. The variables should begin with “$”. You assign variables to reference users in transaction SU_REFUSERVARIABLE.
This assignment applies to all systems in a CUA landscape. If the assigned reference user does not exist in one of the CUA child systems, the assignment is ignored.
Overview
Overview of the properties of users of the different user types:
|
Property \ User Type
|
Dialog
|
Communication
|
System
|
Service
|
| Dialog logon (SAP GUI) | X | – | – | X |
| Multiple logons | – | X | X | X |
| RFC logon | X | X | X | X |
| Background job execution | X | – | X | X |
| Password change | X | X | – | – |
| Logon ticket can be generated | X | X | – | – |
本文作者: GavinDong
版权属于: GavinDong博客
文章链接: https://gavindong.com/208.html
如果使用过程中遇到问题，可 **点击此处** 交流沟通。
版权所有，转载时必须以链接形式注明作者和原始出处及本声明。
